StackRadar

CVE-2025-9232

Medium

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.020
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,355
of 17,790 indexed, latest versions
Container images
1,585
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,355 of 17,790 indexed charts deploy, on 1,585 images.

Affected packageAffected versionsFixed inImages
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0968
openssldeb3.0.9-1, 3.0.11-1~deb12u1, 3.0.11-1~deb12u2, 3.0.13-1~deb12u1+6 more3.0.17-1~deb12u3, 3.5.1-1+deb13u1601
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
OSV records
ALPINE-CVE-2025-9232CGA-3j32-v297-mxhfDEBIAN-CVE-2025-9232UBUNTU-CVE-2025-9232
Also known as
CGA-vgxf-c52j-3xr7

Charts affected

1,355 by stars
ChartLatestAffected imagesRadar Score
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

9,381
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

2,674
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
openssl@3.0.9-r1
3.0.19-r0
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
openssl@3.0.9-r1
3.0.19-r0

Open the chart page →

5,033
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.19-r0
zahoriaut/zahori-server:0.1.17b2de13916f3e
openssl@3.0.8-r3
3.0.19-r0

Open the chart page →

5,847
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
openssl@3.1.7-r0
3.1.8-r1

Open the chart page →

569

Container images carrying it

1,585 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
rancher/local-path-provisioner:v0.0.329289da488b07
openssl@3.5.1-r0
3.5.4-r0
1
rancher/local-path-provisioner:v0.0.309b9148811700
openssl@3.3.2-r0
3.3.5-r0
1
rapidfort/curl:8.7.18483c9f4490f
openssl@3.1.4-r5
3.1.8-r1
1
reaper99/recipya:v1.2.27f7ec3aeb88c
openssl@3.3.2-r4
3.3.5-r0
1
redash/redash:25.8.000d813437db5
openssl@3.0.17-1~deb12u1
3.0.17-1~deb12u3
1
redis/redisinsight:2.68019fcf774631
openssl@3.3.3-r0
3.3.5-r0
1
replicated/replicated-sdk:1.0.0-beta.318751b4963250
openssl@3.3.2-r2
3.5.4-r0
1
restic/restic:0.15.2579e4e6a4931
openssl@3.0.8-r3
3.0.19-r0
1
restic/rest-server:0.14.0d2aff06f47eb
openssl@3.5.0-r0
3.5.4-r0
1
rnwood/smtp4dev:3.6.1912304153668
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
robustadev/kubewatch:v2.9.00457a51e36e8
openssl@3.3.2-r0
3.5.4-r0
1
rocketchat/freeswitch:stablecfba5c20a5cc
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
rocm/k8s-device-plugin:1.31.0.926212c665aab
openssl@3.3.3-r0
3.3.5-r0
1
rotationalio/honu:0.5.069fd30c2e31c
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3
1
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
openssl@3.3.1-r0
3.3.5-r0
1
saidsef/scapy-containerised:v2025.02f17f7c435891
openssl@3.3.3-r0
3.3.5-r0
1
santisbon/evwatcher:latestc4e994ca4540
openssl@3.0.9-1
3.0.17-1~deb12u3
1
santisbon/evworker:lateste807283f8d69
openssl@3.0.9-1
3.0.17-1~deb12u3
1
santisbon/speedtest:latest8ee3a1697227
openssl@3.0.9-1
3.0.17-1~deb12u3
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
scsibug/nostr-rs-relay:0.9.003f54bfbffff
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
sealio/hermitcrab:v0.1.4a326a2f03660
openssl@3.1.4-r5
3.1.8-r1
1
seyiogunniran/my-nginx:1.03a0ed39e5830
openssl@3.5.1-r0
3.5.4-r0
1
shamimkuet/nginx:1.0.2b82902a76a04
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
sharanalwar/redchef-backend:latest8d3cab80df49
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
sharanalwar/redchef-frontend:latest5e82950b16b7
openssl@3.3.3-r0
3.3.5-r0
1
shyamkrishna21/shopsync:latest3998b83def53
openssl@3.3.3-r0
3.3.5-r0
1
signoz/signoz:v0.141.1c10fa03e103c
openssl@3.3.2-r0
3.3.5-r0
1
sigp/siren:v3.0.42c219b04758e
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
sinhasaurabh09/dcn-portal:v1.2c0d08847ddbb
openssl@3.3.2-r1
3.3.5-r0
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
sirrend/helmup-notifications-service:0.1.3997866417011
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
sissbruecker/linkding:1.35.00c5dddf0b37c
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
sky5367/locust-plugins-grafana:latestd51bf68d4b26
openssl@3.1.4-r5
3.1.8-r1
1
skylenet/ethereum-testnet-homepage:latest8698903e379f
openssl@3.0.7-r0
3.0.19-r0
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
openssl@3.0.9-1
3.0.17-1~deb12u3
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
openssl@3.0.9-1
3.0.17-1~deb12u3
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
openssl@3.0.9-1
3.0.17-1~deb12u3
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
openssl@3.0.9-1
3.0.17-1~deb12u3
1
somnathmore/custom-nginx:v2bdfc06cad4ec
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
sondresjo/bobby-api:latestfe534731909a
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
soulteary/cronicle:0.9.80ac2512fa6e39
openssl@3.3.3-r0
3.3.5-r0
1
speckle/speckle-frontend-2:2.20.2-branch.testing4.134160-9fad4b210ad4ade8bf2
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
speckle/speckle-frontend-2:2.20.6-branch.testing1.154030-9b0911432fc940d9b4c
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
speckle/speckle-frontend-2:2.19.2-branch.hotfix-2.19.1.124125-665e7e14f9241665ae3
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
speckle/speckle-frontend-2:2.21.3-branch.testing5.219631-2153befd4ca6ebf09b9
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
speckle/speckle-frontend-2:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbfdc008effc7a
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.